1. Scope
This Privacy Policy explains how Nevv Atlantis LLC ("Developer," "we," or "us") handles information in the LockWhisper iOS application. LockWhisper is designed as a local-first privacy tool. We do not operate a Courier messaging server.
Contact: support@newatlantisstudios.com or (917) 814-8869. Mailing address: Nevv Atlantis LLC, 418 Broadway #11954, Albany, NY 12207, USA. Security reports: security@lockwhisper.com.
2. Information the Developer Collects
The app does not include third-party advertising, cross-app tracking, or analytics SDKs. The Developer does not receive your vault records, passwords, notes, files, media, private keys, browsing history, Courier message content, contacts, or usage logs through the app.
If you contact support, report a security issue, submit an App Store review, or otherwise communicate with us, we receive the information you choose to provide and the routing information required by that channel. We use it to respond, investigate, prevent abuse, and maintain the app. We retain it only as long as reasonably necessary for those purposes, security, dispute resolution, and legal obligations.
Apple independently processes App Store purchases, subscription or entitlement information, downloads, crash information you elect to share with Apple, and related account data under Apple's privacy terms. LockWhisper may read an App Store entitlement on your device but does not receive your payment-card information.
3. Local Data
LockWhisper stores sensitive data locally on your device, including vault data, encryption keys, settings, encrypted Courier history, Courier credentials, browser data when history is enabled, encrypted transfer or backup state, and Security Center state such as finding history and optional breach-check hashes. Local protections may include encryption, Keychain storage, data protection, app authentication, biometric access controlled by iOS, and mode-separated storage.
You control local retention through feature controls and in-app deletion actions. Deleting the app removes its app container through iOS, but Keychain items may survive uninstall. On a subsequent fresh-install launch, LockWhisper runs cleanup of remaining app-accessible credentials and local app data before allowing normal use. Uninstalling is not a promise of immediate or forensic erasure. Local deletion does not delete a Courier server account or copies held elsewhere; see Sections 5 and 8.
Exports, backups, screenshots, downloads, copied data, and files shared to another app leave LockWhisper's protection and are governed by the destination you choose.
3.1 Optional Password Breach Monitoring
Security Center password breach monitoring is off by default. If you enable it, LockWhisper computes a SHA-1 hash of each password on your device and sends only the first five hexadecimal characters of each hash to the Have I Been Pwned Pwned Passwords range service over a direct HTTPS connection. Your plaintext password and complete hash are not sent. LockWhisper compares the returned candidate suffixes locally.
The service operator can receive your IP address, request timing, and the five-character prefixes and handles that information under its own privacy terms. SHA-1 is used only to identify entries in the breach corpus, not to encrypt or protect your password. LockWhisper locally stores checked and compromised full hashes and the last scan date in mode-separated settings so it can reuse recent results. Turning breach monitoring off clears that local breach-check state.
3.2 Optional PGP Public-Key Discovery
PGP public-key discovery uses Web Key Directory (WKD) only after you approve the lookup in the app. LockWhisper connects directly over HTTPS to the email provider's key directory, which may redirect to another HTTPS host. The request identifies the email address being searched, including its domain and email local part. Directory operators and any redirect destination can receive that identity, your IP address, and request timing under their own privacy terms. Your network provider may observe the connection. These requests do not use Private Browsing's Tor Mode.
LockWhisper does not upload your keys or message content during discovery. A returned public key is shown for review and is saved only if you choose to import it. Finding or importing a key does not verify its owner's identity; compare its fingerprint with the owner through another trusted channel.
3.3 Links Shared into LockWhisper
When you use the iOS share extension to send a link to LockWhisper, it saves the URL, optional title, and capture timestamp in an encrypted local inbox shared by the extension and the app. The inbox uses a device-local Keychain key. Pending captures remain locally available for review in Link Vault before you save them as bookmarks; the app removes the inbox entry when you finish saving it. The Developer does not receive these captures.
4. Courier Servers You Select
Courier is optional. To use it, you select a server operated by you or by an independent third party ("Server Operator"). LockWhisper sends protocol data to that server and, for direct delivery, to a recipient's server.
A Server Operator may process:
- Your Courier address, opaque account identifier, public certificate, and public-key generation.
- Access and refresh tokens in hashed or protected server form.
- End-to-end encrypted message envelopes and encrypted attachments until acknowledgment or expiry.
- Routing metadata such as recipient account, message identifier, timestamps, size, expiry, and delivery state.
- Limited IP-address, Tor-circuit, rate-limit, authentication-failure, and security metadata used to prevent abuse and operate the server.
- Federation metadata required to exchange encrypted envelopes with another server.
Message content and attachments are encrypted for recipients before delivery. Encryption does not hide all metadata. The operator's own privacy policy, retention schedule, location, security practices, and legal obligations govern its processing. Review them before registering. We do not select the operator, receive its database, control its backups, or promise that it will honor its policy.
5. Courier Account Deletion, Blocking, and Reports
The app offers Delete Courier Account from the Courier account menu. It signs and sends a deletion request to your selected Server Operator. After the server accepts the request, LockWhisper deletes the local session credential. The reference server disables the account and queues mailbox items, tokens, and published keys for deletion according to its retention process. An independent operator may have a different lawful backup or retention schedule. Local encrypted message history remains until you separately erase it or delete app data.
Blocking a Courier address is stored in the mode-separated local trust store. Future authenticated messages from that address are acknowledged to the server and discarded without storing decrypted text. The sender is not notified.
Courier reports are created locally. LockWhisper does not automatically receive them. Before sharing, the app explains that a report can disclose Courier addresses, server address, timestamps, message ID, attachment names and sizes, and—only if you choose it—decrypted text. The app then uses the iOS share sheet, so you select the recipient and channel. A Server Operator is responsible for responding to reports about its service. Contact us at support@newatlantisstudios.com for app-level safety or functionality issues.
6. Private Browsing and Tor
Private Browsing uses Apple's WebKit. In Tor Mode, supported network requests are routed through the embedded Arti client and the Tor™ network. Tor relays, destination websites, certificate authorities, search providers, download destinations, and other network participants process the information needed for their role. The Tor network separates parts of the route but does not guarantee anonymity.
Private Browsing is not Tor Browser and does not include every Tor Browser anti-fingerprinting defense. Websites may identify or correlate users through logins, browser behavior, content, or device characteristics. In explicitly selected Non-Tor Mode, ordinary websites receive direct network connections. Onion destinations always require Tor.
Tor is a trademark of The Tor Project; all rights reserved. LockWhisper is an independent third-party app and is not endorsed or sponsored by, or affiliated with, The Tor Project. See the official Tor Project website.
Search queries are sent to the search provider you select when you use address-bar search. Website privacy policies govern website and search-provider data.
7. Device Transfer, Backup, Import, and Export
Device transfer and sync are initiated by you and are designed to move encrypted data directly between devices. Local-network discovery can expose a transient service advertisement to devices on the same network. Exported backups and migration packages are files under your control. Anyone with the file and required credentials may be able to restore its contents.
LockWhisper marks sensitive app files and directories for exclusion from ordinary iCloud and computer device backups. Some keys are stored with device-only Keychain protection and do not migrate to another device through a system backup. Do not assume that an ordinary device backup contains everything needed to restore LockWhisper. Use the app's backup and export tools for the data and keys you need, keep the required credentials separately, and test restoration before relying on a backup.
8. Retention and Deletion by the Developer
Because the Developer does not receive app vault data, browsing history, or Courier content, we have no developer database containing that data to access, correct, export, or delete. Use in-app controls to delete local data; uninstall and Keychain limitations are described in Section 3. Use Delete Courier Account before deleting the app to request deletion from your selected Server Operator. Local deletion and uninstall do not retract exports, reports, backups, or messages already delivered, or remove data held by another app or an independent Server Operator. Direct requests about information you intentionally sent to support to support@newatlantisstudios.com.
9. Legal Bases and Disclosures
Where privacy law requires a legal basis, support information is processed to perform requested support, pursue legitimate interests in security and maintenance, comply with law, or with your consent where required. We do not sell or share personal information for cross-context behavioral advertising.
We may disclose support communications when required by valid law, to protect users or the public, to investigate abuse or security incidents, or in a business transfer subject to applicable safeguards. Courier Server Operators make their own disclosure decisions independently.
10. Children
LockWhisper is not directed to children under 13, or the higher minimum age required in a user's jurisdiction. We do not knowingly collect children's personal information through the app. Server Operators must establish and enforce any age and child-safety rules applicable to their service.
11. Security and Limits
We use technical and organizational safeguards appropriate to the limited information we receive. No device, encryption system, network, Server Operator, or communication channel is perfectly secure. Keep iOS updated, use strong credentials, verify Courier fingerprints out of band, test backups, and share exports and reports only with trusted recipients.
12. Changes
We may update this policy as the app, law, or distribution changes. A material in-app legal update requires acceptance of the new document version. The Last Updated date identifies this version.
13. Contact and Rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of information held by the Developer, or to complain to a data-protection authority. Contact support@newatlantisstudios.com, (917) 814-8869, or Nevv Atlantis LLC, 418 Broadway #11954, Albany, NY 12207, USA. We may need limited information to verify and answer a request. For data held by a Courier Server Operator, contact that operator directly.